mirror of
https://github.com/brain-hackers/linux-brain.git
synced 2024-06-09 23:36:23 +09:00
a840e37ef8
This reverts commit 9110e2f263.
This commit is not suitable for 5.4-stable because the openat2 system
call does not exist in v5.4.
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
33 lines
1.1 KiB
Bash
33 lines
1.1 KiB
Bash
#!/bin/sh
|
|
# SPDX-License-Identifier: GPL-2.0
|
|
# description: Kprobe event user-memory access
|
|
|
|
[ -f kprobe_events ] || exit_unsupported # this is configurable
|
|
|
|
grep -q '\$arg<N>' README || exit_unresolved # depends on arch
|
|
grep -A10 "fetcharg:" README | grep -q 'ustring' || exit_unsupported
|
|
grep -A10 "fetcharg:" README | grep -q '\[u\]<offset>' || exit_unsupported
|
|
|
|
:;: "user-memory access syntax and ustring working on user memory";:
|
|
echo 'p:myevent do_sys_open path=+0($arg2):ustring path2=+u0($arg2):string' \
|
|
> kprobe_events
|
|
|
|
grep myevent kprobe_events | \
|
|
grep -q 'path=+0($arg2):ustring path2=+u0($arg2):string'
|
|
echo 1 > events/kprobes/myevent/enable
|
|
echo > /dev/null
|
|
echo 0 > events/kprobes/myevent/enable
|
|
|
|
grep myevent trace | grep -q 'path="/dev/null" path2="/dev/null"'
|
|
|
|
:;: "user-memory access syntax and ustring not working with kernel memory";:
|
|
echo 'p:myevent vfs_symlink path=+0($arg3):ustring path2=+u0($arg3):string' \
|
|
> kprobe_events
|
|
echo 1 > events/kprobes/myevent/enable
|
|
ln -s foo $TMPDIR/bar
|
|
echo 0 > events/kprobes/myevent/enable
|
|
|
|
grep myevent trace | grep -q 'path=(fault) path2=(fault)'
|
|
|
|
exit 0
|